The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total57,209
Mitigations19,333
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
BuddyForms<= 2.10.6
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
7 minutes ago
FV Player 8<= 8.1.9
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
7 minutes ago
Quick Page/Post Redirect5.2.1-5.2.3
Backdoor vulnerability
10
8 minutes ago
WP Ultimate CSV Importer< 9.2
Unauthenticated Post Data Disclosure vulnerability
3.7
9 minutes ago
Chargely Free Subscriptions For Woocommernce<= 1.0
Unauthenticated WooCommerce REST API Credential Disclosure vulnerability
7.5
10 minutes ago
Email Marketing 4Dem<= 2.0.5
Unauthenticated Settings Modification and Configuration Disclosure vulnerability
6.5
12 minutes ago
Email Marketing 4Dem<= 2.0.5
Unauthenticated Configuration Destruction and Arbitrary Plugin Record Deletion vulnerability
6.5
12 minutes ago
WP Ultimate CSV Importer< 9.3
Admin+ SQLi vulnerability
4.9
2 hours ago
SEOJuice< 2.12.0
Administrator Account Creation vulnerability
8.8
2 hours ago
Duplicate Post< 1.5.8
Authenticated Post Publishing Restriction Bypass vulnerability
5.3
2 hours ago
Duplicate Post< 1.5.8
Authenticated Arbitrary Post Slug Takeover vulnerability
5.3
2 hours ago
Duplicate Post< 1.5.8
Authenticated Plugin Settings and Access Control Modification vulnerability
3.1
2 hours ago
Flatsome< 3.20.13
Contributor+ Post Type and Status Overwrite vulnerability
4.3
2 hours ago
Flatsome< 3.20.13
Unauthenticated Unpublished Post Disclosure vulnerability
5.3
2 hours ago
Countdown & Clock<= 3.0.8
Subscriber+ Non-Public Post Title Disclosure vulnerability
4.3
2 hours ago
Countdown & Clock<= 3.0.8
Author+ Stored XSS vulnerability
6.5
2 hours ago
ag-psd< 31.0.0
npm: ag-psd can exhaust memory when parsing crafted PSD dimensions
7.5
8 hours ago
@sveltejs/kit< 2.70.4
npm: SvelteKit: adapter-node crashes with an unhandled URIError when `reroute` rewrites malformed pathnames
5.9
11 hours ago
@sveltejs/adapter-static< 3.0.11
npm: SvelteKit: Prerendered paths are interpreted as regular expressions in Vercel route config generated by @sveltejs/adapter-vercel and @sveltejs/adapter-static
5.9
11 hours ago
@sveltejs/adapter-vercel< 6.3.5
npm: SvelteKit: Prerendered paths are interpreted as regular expressions in Vercel route config generated by @sveltejs/adapter-vercel and @sveltejs/adapter-static
5.9
11 hours ago